问题
I tried attaching to a process (which belongs to an antivirus) using windbg. I ran windbg as administrator but I get the following error when I try to attach to the process:
Unable to examine process id 6128. Win32 error 0n5
Cannot debug pid 6128, Win32 error 0n5
Access is denied
Is there anything that I am overlooking? Thank you for your help
回答1:
Even though you're logged on as an administrator, you may need to run windbg as an elevated administrator. Try right clicking the windbg icon and select "Run as administrator". Then attempt to attach to the process.
Also from Harry Johnston comment above:
Anti-virus software usually protects its processes from interference, including debugging. There may be an option to turn this off, look for "tamper protection" or similar. If there is no option to disable tamper protection, there is probably no straightforward way to debug the process.
来源:https://stackoverflow.com/questions/32770861/windbg-could-not-attach-to-process-access-was-denied